Roles & Responsibilities

• Identify the critical business processes: work with the client reviewing documentation of critical processes associated with the business, understanding the prioritized applications for remediation.
• SoD: Assist in performing information gathering processes to identify the toxic access combinations. This involves reviewing entitlements and role data, role-entitlement mapping, user access, job functions, application functions, and permission to determine SoDs.
• Recommend mitigating controls: design, define, and recommend mitigating controls that need to be implemented to address critical risks associated with the business process as it relates to the process. This may involve recommendations for changing user access privileges, implementing monitoring controls to detect unauthorized access, or implementing two-factor authentication.
• Develop SoD rulesets, remediation, and mitigation control.
• RBAC: Assist in performing RBAC - role discovery/engineering exercise, which includes but not limited to - information-gathering and data analysis (reviewing entitlements and role data, role-entitlement mapping, user access, user job functions, etc.)
• Assist in developing the following documents: 

              - SoD policy and procedure
              - Business requirements
              - Low-level design
              - Test cases and plan

• Assist with access certification campaigns